CVE-2025-55524

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-55524

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

I

nsecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.

References
Link Resource
https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/restart.py Product
https://github.com/vityuasd/VulList/blob/main/vul_3.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:agent-zero:agent-zero:*:*:*:*:*:*:*:*
History

08 Jan 2026, 14:22

Type Values Removed Values Added
CPE cpe:2.3:a:agent-zero:agent-zero:*:*:*:*:*:*:*:*
References () https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/restart.py - () https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/restart.py - Product
References () https://github.com/vityuasd/VulList/blob/main/vul_3.md - () https://github.com/vityuasd/VulList/blob/main/vul_3.md - Exploit, Third Party Advisory
First Time Agent-zero agent-zero
Agent-zero

22 Aug 2025, 18:08

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-21 18:15

Updated : 2026-01-08 14:22

NVD link : CVE-2025-55524

Mitre link : CVE-2025-55524

CVE.ORG link : CVE-2025-55524

JSON object : View

Products Affected

agent-zero

CWE
CWE-732

Incorrect Permission Assignment for Critical Resource